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SYSTEM AND METHOD FOR DETECTING 
AND ISOLATING A REMOTE LOOP 

FIELD OF THE INVENTION 

[0001] The invention relates to network configuration protocols, and, more particularly, 

to protocols which enable remote loop detection and allow for isolation of those remote loops. 

BACKGROUND OF THE INVENTION 

[0002] A computer network typically comprises a plurality of interconnected devices, 

These devices include any network device, such as a server or end station, that transmits or 
receives data frames. A common type of computer network is a local area network ("LAN") 
which typically refers to a privately owned network within a single building or campus. LANs 
may employ a data communication protocol, such as Ethernet or token ring, that defines the 
functions performed by the data link and physical layers of a communications architecture in the 
LAN. In many instances, several LANs are interconnected by point-to-point links, microwave 
transceivers, satellite hook-ups, etc. to form a wide area network ("WAN"), that may span an 
entire country or continent. 

[0003] One or more intermediate network devices are often used to couple LANs 

together and allow the corresponding entities to exchange information. For example, a bridge 
may be used to provide a bridging function between two or more LANs. Alternatively, a switch 
may be utilized to provide a switching function for transferring information among a plurality of 
LANs or end stations. In effect, a switch is a bridge among more than 2 networks or entities. 
The terms "bridge" and "switch" will be used interchangeably throughout this description. 
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Bridges and switches are typically devices that operate at the Data Link layer ("layer 2") of the 
Open Systems Interconnection ("OSI") model. Their operation is defined in the American 
National Standards Institute ("ANSI") Institute of Electrical and Electronics Engineers ("IEEE") 
802. ID standard. A copy of the ANSI/IEEE Standard 802. ID, 1998 Edition, is incorporated by 
referenced herein in its entirety. 

[0004] Telecommunication traffic among network devices is divided into seven layers 

under the OSI model and the layers themselves split into two groups. The upper four layers are 
used whenever a message passes to or from a user. The lower three layers are used when any 
message passes through the host computer, whereas messages intended for the receiving 
computer pass to the upper four layers. "Layer 2" refers to the data-link layer, which provides 
synchronization for the physical level and furnishes transmission protocol knowledge and 
management. 

[0005] Networks may be designed using a plurality of distinct topologies - that is the 

entities in the network may be coupled together in many different ways. Referring to Figs. 1-3, 
there is shown different examples of "ring" topologies. A ring topology is a network 
configuration formed when "Layer 2" bridges are placed in a circular fashion with each bridge 
having two and only two ports belonging to a specific ring. Fig. 1 shows a single ring 50 having 
bridges 52 connected by paths 54. Each bridge 52 in ring 50 in Fig. 1 has two ports 52a and 52b 
belonging to the ring. Fig. 2 shows two adjacent rings, 50a and 50b, with a single bridge 56 
having two ports 56a, 56b belonging to each ring. 

[0006] In Figs. 1 and 2, no paths or bridges are shared among rings. In Fig. 3 two rings 

50c and 50d are connected and share two bridges 58, 60. Bridge 58 has two ports 58a and 58b 
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which each uniquely belong to only one ring, rings 50c and 50d respectively. Bridge 58 also has 
one port 58c connected to a path which is shared by both rings 50c and 50d. If rings are assigned 
different priority levels, a port such as 58c connected to the shared link assumes the priority 
value of the higher priority ring, and ports 58a and 58b in shared bridge 58 and port 60a in bridge 
60 connected to the lower priority ring are deemed to be customer (or lower priority) ports. The 
use of a shared link between shared bridges 58, 60 allows for the connection of rings and the 
growth of a larger network from smaller ring components; however, the shared link also presents 
difficulties since its failure affects both rings 50c and 50d. 

[0007] Ring topologies shown in Figs. 1-3 present Layer 2 traffic looping problems. As 

illustrated in Fig. 4, in a single ring topology, data traffic can circulate around in either direction 
past their origination and thus create repetition of messages. For example, data traffic may 
originate in bridge 51, travel counter-clockwise in the ring, pass bridge 57 and return to bridge 
5 1 ; this is called a loop. Loops are highly undesirable because data frames may traverse the 
loops indefinitely. Furthermore, because switches and bridges replicate (i.e., flood) frames 
whose destination port is unknown or which are directed to broadcast or multicast addresses, the 
existence of loops may cause a proliferation of data frames that effectively overwhelms the 
network. 

[0008] To prevent looping, one of the paths in the ring is blocked, as shown in Fig. 4, by 

blocking data traffic in one of the ring ports - in this case, either port 51a or 57a. The port is 
deemed to be in a "blocking" state, in which it does not learn or forward incoming or outgoing 
traffic. 
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[0009] A network may be segregated into a series of logical network segments. For 

example, any number of physical ports of a particular switch may be associated with any number 
of other ports by using a virtual local area network ("VLAN") arrangement that virtually 
associates the ports with a particular VLAN designation. Multiple ports may thus form a VLAN 
even though other ports may be physically disposed between these ports. 

[0010] The VLAN designation for each local port is stored in a memory portion of the 

switch such that every time a message is received by the switch on a local port the VLAN 
designation of that port is associated with the message. Association is accomplished by a flow 
processing element which looks up the VLAN designation in the memory portion based on the 
local port where the message originated. 

[0011] Most networks include redundant communications paths so that a failure of any 

given link or device does not isolate any portion of the network. For example, in the ring 
networks shown in Figs. 1-4, if communication is blocked preventing data from flowing counter- 
clockwise, the data may still reach its destination by moving counter-clockwise. The existence 
of redundant links, however, may also cause the formation of loops within the network. 

[0012] To avoid the formation of loops, many network devices execute a "spanning tree 

algorithm" that allows the network devices to calculate an active network topology which is 
loop-free (e.g. has a needed number of ports blocked) and yet connects every element in every 
VLAN within the network. The IEEE 802. ID standard defines a spanning tree protocol ("STP") 
to be executed by 802. ID compatible devices (e.g., bridges, switches, and so forth). In the STP, 
Bridge Protocol Data Units ("BPDUs") are sent around the network and are used to calculate the 
loop free network technology. 



BRMFSl 417292v3 



[0013] Other available protocols include that shown and described in now pending 

NETWORK CONFIGURATION PROTOCOL AND METHOD FOR RAPID TRAFFIC 
RECOVERY AND LOOP AVOIDANCE IN RING TOPOLOGIES, filed March 4, 2002, serial 
number 10/090,669 and now pending SYSTEM AND METHOD FOR PROVIDING 
NETWORK ROUTE REDUNDANCY ACROSS LAYER 2 DEVICES, filed April 16, 2002, 
serial number 10/124,449. The entirety of these applications are hereby incorporated by 
reference. 

[0014] All of the current protocols require devices in a network to be protocol-aware. 

That is, each device must be able to run and understand the protocol that is globally running in 
the network. A misconfigured protocol or malfunctioning device could potentially cause a loop 
that would impact the whole network. 

[0015] To illustrate this problem, referring to Fig. 5, there is shown a network 80 

comprising a core or higher priority network such as a provider 70 coupled to a customer or 
lower priority network 72 through a switch 74. Core network 70 runs a conventional spanning 
tree protocol to avoid loops and has defined a blocked path 76. This means that either port 78 or 
port 80 is blocked. Many different causes may result in involuntary loops which may collapse 
the entire network 80 including: STP corrupted BPDUs, unidirectional optical fibers which 
result, for example, when paths which typically comprise two fibers but one has shut down, and 
non-configured protocols in loop topologies. In the example in Fig. 5, someone in customer 
network 72 has improperly disabled the STP running in network 72 or, the STP has become 
disabled due to problems just mentioned. As a consequence, even though core network 70 is 
properly running the STP to avoid loops, since the customer in network 72 is not running the 
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STP, a loop is created in customer network 72 and packets from customer network 72 flood core 
network 70. As core network 70 and customer network 72 share the same data domain, core 
network 70 will be flooded with customer packets and will be affected adversely by the 
customer's action. Yet, it is not possible to ensure that all network administrators or devices are 
properly doing their respective jobs and running respective STPs. 

[0016] Therefore, there is a need in the art for a system and method which can detect and 

isolate remote loops created in another network. 

SUMMARY OF THE INVENTION 
[0017] Systems and methods are described for enabling a first network to detect a loop in 

a second network connected thereto. The first network runs a first instance of a Spanning Tree 
Protocol and the second network runs either a different instance or no instance. The method 
includes sending a Remote Loop Detection Packet ("RLDP") from the ports in bridges of the 
first network which are connected to the second network. The RLDP includes identifiers such as 
the source bridge, port and VLAN. The system and method further includes checking for receipt 
of the RLDP on the same bridge which sent the RLDP. If such a receipt occurs, a loop is 
detected and one of the ports of the receiving/sending bridge is blocked. 

[0018] In one aspect of the invention, a method enables a first network to detect a loop 

in a second network. The second network is connected to the first network. The first network is 
running a first loop avoidance protocol such a STP. The second network is either running a 
different instance of a loop avoidance protocol or not running any protocol at all. 

[0019] The method includes sending a first loop packet from a first port in a bridge 

running a loop avoidance protocol of the first network. The first loop packet includes a first 
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identifier with a first reference to the first port. The method further includes receiving a second 
loop packet at the bridge, the second loop packet including a second identifier with a second 
reference to a second port. The method still further includes decoding the second loop packet to 
determine the second reference, comparing the second reference with the first reference, and 
detecting the loop in the second network when the first and second references match. 

[0020] In another aspect of the invention a system enables a first network to detect a loop 

in a second network. The second network is communicably coupled to the first network. The 
first network is running a first loop avoidance protocol instance, the second network is not 
running the first loop avoidance protocol instance. The system comprises a first network, a 
bridge in the first network; and a first port in the bridge. The first port sends a first loop packet 
including a first identifier with a first reference to the first port. The bridge receives a second 
loop packet, the second loop packet including a second identifier with a second reference to a 
second port. The bridge further determines the second reference, compares the second reference 
with the first reference, and detects the loop in the second network when the first and second 
references match. 

[0021] In yet another aspect of the invention, a bridge in a first network is communicably 

coupled to a second network. The first network is running a first loop avoidance protocol 
instance. The second network is not running the first loop avoidance protocol instance. The 
bridge comprises a first port. The first port sends a first loop packet including a first identifier 
with a first reference to the first port. The bridge receives a second loop packet, the second loop 
packet including a second identifier with a second reference to a second port. The bridge further 
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determines the second reference, compares the second reference with the first reference, and 
detects a loop in a second network when the first and second references match. 

[0022] In still yet another aspect of the invention, a computer readable storage medium 

includes computer executable code for enabling a first network to detect a loop in a second 
network. The second network is communicably coupled to the first network. The first network 
is running a first loop avoidance protocol instance. The second network is not running the first 
loop avoidance protocol instance. The code performs the steps of sending a first loop packet 
from a first port in a bridge of the first network, the first loop packet including a first identifier 
with a first reference to the first port. The code further performs receiving a second loop packet 
at the bridge, the second loop packet including a second identifier with a second reference to a 
second port. The code determines the second reference, compares the second reference with the 
first reference and detects the loop in the second network when the first and second references 
match. 

[0023] In yet another aspect of the invention, a system enables a first network to detect a 

loop in a second network. The second network being communicably coupled to the first 
network. The first network running a first loop avoidance protocol instance, the second network 
not running the first loop avoidance protocol instance. The system comprises a first network and 
a plurality of bridges in the first network. The system further comprises a plurality of ports, at 
least one port for each of the bridges. Each port connected to the second network sends a 
respective first loop packet including a first identifier with a first reference to the respective port. 
Each bridge receives a respective second loop packet, each second loop packet including a 
respective second identifier with a respective second reference to a respective second port. Each 
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respective bridge further determines the respective second reference, compares the respective 
second reference with the respective first reference, and detects a loop in the second network 
when the respective first and respective second references match. 

[0024] Still yet another aspect of the invention is a method for enabling a first network to 

detect a loop in a second network communicably coupled to the first network. The first network 
is running a first loop avoidance protocol instance. The second network is not running the first 
loop avoidance protocol instance. The method comprises running a second protocol in the first 
network to detect a loop in the second network and protecting the first network when a loop is 
detected in the second network. 

[0025] Yet still another aspect of the invention is a system for enabling a first network to 

detect a loop in a second network communicably coupled to the first network. The system 
comprises a first network running a first loop avoidance protocol instance. A second network is 
not running the first loop avoidance protocol instance. The first network runs a second loop 
avoidance protocol instance to detect for a loop in the second network. The first network further 
protects the first network when a loop is detected in the second network. 

[0026] Still yet another aspect of the invention is a system comprising a first network 

running a first loop avoidance protocol instance. A second network is communicably coupled to 
the first network. The second network is not running the first loop avoidance protocol instance 
and has a loop. The first network is protected from the loop in the second network. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0027] Figs. 1-4 are network diagrams showing prior art network architecture. 
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[0028] Fig. 5 is a network diagram showing a prior art network architecture where an 

undesired loop has formed. 

[0029] Fig. 6 is a network diagram detailing some of the functioning of one embodiment 

of the invention. 

[0030] Fig. 7 is a network diagram showing a blown up view of a portion of Fig. 6 and 

detailing some of the functioning of one embodiment of the invention. 

[0031] Fig. 8 is a network diagram detailing some of the functioning of one embodiment 

of the invention. 

[0032] Fig. 9 is a flow chart detailing some of the functioning of the invention. 

[0033] Fig. 9a is a flow chart detailing some of the functioning of the invention. 

[0034] Fig. 1 0 is a schematic diagram showing an example of some of the components of 

a switch in accordance with the invention along with an example of recording media. 



DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

[0035] As stated above, it is not possible to assure that all network administrators adhere 

to their task of running a STP or that all network devices operate properly. It is therefore 
desirable to be able to isolate a first network from other networks coupled thereto in case a loop 
occurs. For example, in L2 metro provider cases, a network in San Jose should not be brought 
down because a network administrator in San Francisco forgot to enable STP or other loop 
avoidance protocol on his switches or because a device or other failure in San Francisco caused 
STP. 
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. « . • 

[0036] Referring now to Fig. 6, in accordance with the invention, a Remote Loop 

Detection Protocol ("RLDP") is established. The RLDP is a port-VLAN oriented protocol or 
program used to detect loops in a network 100. The RLDP may be run out of every port in every 
VLAN coupled to another network. The protocol is light and should not cause high CPU 
utilization. For example, core network 102 may be running a first instance of a STP while the 
connected networks may be running a different instance or no instance. 

[0037] The RLDP allows for any switch in network 100 to remotely monitor any network 

connected to its ports. Upon detection of a loop in the remote network, the RLDP takes 
administrative action (discussed below) to block ports connected to the remote network with the 
loop. As shown in Fig. 6, with core network 102 communicably coupled to customer networks 
1 10, 112, 1 14, 1 16 and 118, RLDP is enabled in switches 104, 106 and 108 but not necessarily in 
switch 107. Although core network 102 is shown directly coupled to customer networks 1 10, 
112, 114, 116 and 118, clearly these networks may also be indirectly communicably coupled 
through other intervening networks. Additionally, networks 1 10, 1 12, 1 14, 1 16 and 118 may 
choose to run RLDP in switches 124, 126, 128, 130, 132, 134 and 136 respectively. For the 
purposes of illustration the following discussion will focus on core network 1 02 using RLDP to 
detect a loop in a network connected to it. 

[0038] Switch 104 is shown in a blow up 120 in Fig. 6 illustrating the presence of the 

RLDP software module 122 which is included in switch 104, switch 106 and switch 108. The 
RLDP program may be stored in switch 104 or may be stored remotely and accessed by switch 
104. With respect to switch 104, when a loop is detected in a particular one of customer 
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networks 110, 1 12, 1 14, 1 16 or 1 18, that particular customer network is isolated from core 
network 102 while the remaining customer networks may remain connected to core network 102. 

[0039] When the RLDP is enabled on a port of a switch, that port generates RLDP 

packets which are sent out at a constant interval - for example 0.1 seconds - which may be 
changed by the operator. The RLDP packets include unique information discussed below. The 
packets are L2 multicast packets with a MAC address of 0x030480000102 . The packets are sent 
from ports in a VLAN where the RLDP is enabled and follow the tag mode of the particular port. 
If the port is tagged to a VLAN, an IEEE 802. 1Q tag is added to the packet between the Media 
Control Access ("MAC") address and the data portion of the packet. 

[0040] Exemplary contents of a RLDP packet are shown immediately below: 

Protocol Identifier - 2 bytes. This is encoded in the first two octets of the RLDP packet and 
takes the value of'T\ 

Protocol Version - 1 byte. This is encoded in the third octet and takes the value of "0". 

VLAN Identifier - 2 bytes. This is encoded in the fourth and fifth octet and takes the value of 
the VLAN where the RLDP packet originated. 

Bridge identifier - 6 bytes. This is encoded in octets 6 through 1 1. It represents the bridge 
identification which should be unique. The first MAC address of the bridge may be used. 

Port Identifier - 2 bytes. This is encoded in the twelfth and thirteenth octet. It includes the port 
ED in the system and should be a unique number within the bridge. The SNMP (Simple Network 
Management Protocol) interface ID may be used. 
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[0041] Referring now to Fig. 7, when a RLDP packet is received on a port of a switch 

running the RLDP, such as switch 108, the RLDP determines whether the bridge identifier and 
port identifier of the received packet corresponds to the bridge/switch which received the 
received packet. If the identifiers do match, the RLDP has detected a loop in remote network 
118 and action is taken to isolate that loop and the network. In order for a match to occur, the 
RLDP packet would have to originate in the receiving bridge, travel in a loop, and the then return 
to the receiving bridge. As network 102 has a blocked path, the loop must be in the customer 
network 118 attached to it. 

[0042] The action taken by the RLDP includes blocking a data path either on the port 144 

sending the RLDP packet or the port 142 that received the RLDP packet. The default option is 
that the RLDP will block the port that receives the RLDP packets. Such a situation is shown in 
Fig. 7. However, as shown in Fig. 8, sometimes blocking the receiving port is not desirable as 
such blocking may impact all of network 102. In this situation, the sending port 146 of bridge 
106 is blocked. Generally, each network administrator decides, based on the architecture of the 
network, which ports to be blocked when a loop is found. 

[0043] However, referring again to Fig. 6, if a customer network is connected to the 

provider network 102 through two ports, both of which are running the RLDP, as is the case with 
switch 104, a different procedure is used. As both ports 104a and 104b are sending out RLDP 
packets, if a loop is detected in network 110, both ports will receive these packets and will move 
to a blocking state. To avoid this situation, as an alternative embodiment, if a loop is detected, 
the RLDP determines whether the port which received the packet is different from the port which 
sent the packet. If they are the not different, then the sending/receiving port is blocked. If they 
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are different, then if the receiving port has a lower port ID than the sending port, then the 
receiving port is blocked. Otherwise, the sending port is blocked. Of course, the port with a 
higher ID could be blocked or any other method used which ensures that one port is blocked 
even if more than one port receives a RLDP packet indicating a loop. 

[0044] The RLDP software continues to send and receive RLDP packets on ports that are 

in the blocking state. No other data is received because the port is in a blocked state. However, 
the RLDP packets are still received so that the switch knows when the loop is fixed. Continuing 
with the example shown in Fig. 7, if the RLDP packet corresponding to port 142 is no longer 
received on port 142, it is likely that the loop is fixed. Thus, if a RLDP packet is not received in 
a known loop for a per port waiting time, port 142 changed from blocking to forwarding. The 
per port waiting time can be configured and its default value is 10 seconds. 

[0045] Referring now to Fig. 9, there is shown a flow chart summarizing the operations 

of the invention for a particular bridge/switch operating the RLDP. At step S2, the RLDP 
software queries whether it is time to send a RLDP packet. If it is time, the packet is sent at step 
S3 and control branches to Step S5. If not, control still branches to step S5 where the RLDP 
software queries whether a RLDP packet has been received. If such a packet has been received, 
control branches to step S4. If not, control still branches to step S24 where the RLDP software 
queries whether any port is blocked. If the answer is yes, the control branches to step S26. If the 
answer in step S24 is no, control branches back to step SI . 

[0046] Assuming that a RLDP packet has been received, at step S4, the RLDP decodes 

the bridge identifier received in the packet. At step S6, the RLDP determines whether the bridge 
identifier in the received RLDP packet matches the bridge identifier of the particular bridge. If 
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the identifiers do not match, the frame in the RLDP packet is flooded to the applicable ports in 
the VLAN in step S14 and control branches back to step SI . If the bridge identifiers do match, 
control branch to step S8 where the VLAN and port IDs are decoded from the received RLDP 
packet. 

[0047] Control then branches to step S10, where the RLDP software determines whether 

the RLDP program is running on the decoded port and VLAN. If the program is not running, 
control branches to step S12 where the frame is dropped because presumably there is a log error 
and then control branches back to step SI . If the program is running on the decoded port and 
VLAN, control branches to step S16 where the RLDP software determines whether the block 
receive mode is enabled. The block receive mode dictates whether the port sending RLDP 
packets or the port which received the RLDP packet should be blocked. If this mode is enabled, 
control branches to step S21 where the RLDP determines whether the receiving port is already 
blocked. If it is, control branches to step SI. If not, control branches to step S22 and the port 
which received the RLDP packet is blocked. If the blocking mode is not enabled at step SI 6, 
control branches to step S19 where the RLDP determines whether the port whose ID is in the 
received RLDP packet is blocked. If it is, control branches to step SI . If not, control branches to 
step S18 where the port whose ID is in the received RLDP packet is blocked. After either steps 
SI 8 or S22, control branches to step S20 where the current time is marked as the last time a 
RLDP packet was received and control branches back to SI . 

[0048] Referring back to step S24, where the RLDP determines whether any port is 

blocked. If no port is blocked, control branches back to step SI. If a port is blocked, control 
branches to step S26 where the RLDP queries whether the current time minus the last time a 
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RLDP packet was received is greater than or equal to the per port waiting time for the blocked 
port. If the answer is no, control branches to step SI . If the answer is yes, control branches to 
step S28 and the blocking port is set to a forwarding port and then control branches back to step 
SI. 

[0049J Referring to Fig. 9A, there is shown another flow chart summarizing some of the 

features of the invention. As stated above, if a customer network is connected to two ports, both 
running a RLDP, if a loop is detected in the customer network, both ports may end up in a 
blocking state. In addition to determining which port to block using step SI 6, the RLDP may 
include steps SI 1 and S15 as shown in Fig. 9 A. As in the prior embodiment, if a RLDP packet is 
received, control branches through steps S5, S4, S6, S8 and S10 as discussed above. If the 
answer to the query in step S10 is yes, control branches to step SI 1 where the RLDP determines 
whether the RLDP program is running on the received port. If the answer at step SI 1 is no, 
control branches to step S16 as discussed above. 

[0050] If the answer to the query at step SI 1 is yes, then control branches to step SI 5 

where the RLDP queries whether the receiving port ID is less than or equal to the sending port 
ID. If the answer is yes, control branches to step S19 as discussed above. If the answer is no, 
control branches to step S21 as discussed above. Clearly, the decision made in step SI 5 could be 
effectuated using the port with a higher ID or any other method which ensures that one port is 
blocked even if more than one port receives a RLDP packet indicating a loop. Whatever method 
is chosen, such method will override any customer configuration. 

[0051] Referring to Fig. 10, each switch may comprise a conventional computer 206 

including a CPU 200, a read only memory ("ROM") 202, a random access memory ("RAM") 
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204, a storage device 208, a network interface (such as the ports discussed above) 210 and an 
input device 212 all coupled together by a bus 214. The RLDP program may be stored on 
computer 206, on storage media 216 or stored remotely. 

[0052] Thus, by broadcasting a unique packet from each port which includes an identifier 

of that port, determining whether packets received at a particular port include the identifier for 
the port, and blocking ports based on this determination, a system and method for isolating 
remote loops is achieved. 

[0053] While the invention has been described and illustrated in connection with 

preferred embodiments, many variations and modifications as will be evident to those skilled in 
this art may be made without departing from the spirit and scope of the invention, and the 
invention is thus not to be limited to the precise details of methodology or construction set forth 
above as such variations and modification are intended to be included within the scope of the 
invention. 
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